Skip to content

Commit 44c5162

Browse files
MorBriskerMorBriskerMs
MorBrisker
and
MorBriskerMs
authored
Add assesments & assessment metadata new API versions (#15196)
* DuplicateAssessmentsFiles * Add2021-06-01AsessmentsAPIVersion * Add2021-06-01AsessmentsAPIVersion * Add2021-06-01AsessmentsAPIVersion * Add2021-06-01AsessmentsAPIVersion * Add2021-06-01AsessmentsAPIVersion * Update assessmentMetadata.json * Update CreateAssessmentsMetadata_subscription_example.json * Add2021-06-01AsessmentsAPIVersion * Add2021-06-01AsessmentsAPIVersion * Add2021-06-01AsessmentsAPIVersion Co-authored-by: MIDDLEEAST\morbrisker <[email protected]>
1 parent 1a70101 commit 44c5162

14 files changed

+1683
-2
lines changed

‎specification/security/resource-manager/Microsoft.Security/stable/2021-06-01/assessmentMetadata.json

Lines changed: 678 additions & 0 deletions
Large diffs are not rendered by default.

‎specification/security/resource-manager/Microsoft.Security/stable/2021-06-01/assessments.json

Lines changed: 467 additions & 0 deletions
Large diffs are not rendered by default.

‎specification/security/resource-manager/Microsoft.Security/stable/2021-06-01/examples/Assessments/DeleteAssessment_example.json

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
{
2+
"parameters": {
3+
"api-version": "2021-06-01",
4+
"resourceId": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss2",
5+
"assessmentName": "8bb8be0a-6010-4789-812f-e4d661c4ed0e"
6+
},
7+
"responses": {
8+
"200": {},
9+
"204": {}
10+
}
11+
}

‎specification/security/resource-manager/Microsoft.Security/stable/2021-06-01/examples/Assessments/GetAssessmentWithExpand_example.json

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
{
2+
"parameters": {
3+
"api-version": "2021-06-01",
4+
"resourceId": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss2",
5+
"assessmentName": "21300918-b2e3-0346-785f-c77ff57d243b",
6+
"$expand": "links"
7+
},
8+
"responses": {
9+
"200": {
10+
"body": {
11+
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss2/providers/Microsoft.Security/assessments/21300918-b2e3-0346-785f-c77ff57d243b",
12+
"name": "21300918-b2e3-0346-785f-c77ff57d243b",
13+
"type": "Microsoft.Security/assessments",
14+
"properties": {
15+
"resourceDetails": {
16+
"source": "Azure",
17+
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss2"
18+
},
19+
"displayName": "Install endpoint protection solution on virtual machine scale sets",
20+
"status": {
21+
"code": "NotApplicable",
22+
"cause": "OffByPolicy",
23+
"description": "The effective policy for the assessment was evaluated to off - use Microsoft.Authorization/policyAssignments to turn this assessment on",
24+
"statusChangeDate": "2021-04-12T09:07:18.6759138Z",
25+
"firstEvaluationDate": "2021-04-12T09:07:18.6759138Z"
26+
},
27+
"additionalData": {
28+
"linkedWorkspaceId": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myLaWorkspace"
29+
},
30+
"links": {
31+
"azurePortalUri": "https://www.portal.azure.com/?fea#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/21300918-b2e3-0346-785f-c77ff57d243b"
32+
}
33+
}
34+
}
35+
}
36+
}
37+
}

‎specification/security/resource-manager/Microsoft.Security/stable/2021-06-01/examples/Assessments/GetAssessment_example.json

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
{
2+
"parameters": {
3+
"api-version": "2021-06-01",
4+
"resourceId": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss2",
5+
"assessmentName": "21300918-b2e3-0346-785f-c77ff57d243b"
6+
},
7+
"responses": {
8+
"200": {
9+
"body": {
10+
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss2/providers/Microsoft.Security/assessments/21300918-b2e3-0346-785f-c77ff57d243b",
11+
"name": "21300918-b2e3-0346-785f-c77ff57d243b",
12+
"type": "Microsoft.Security/assessments",
13+
"properties": {
14+
"resourceDetails": {
15+
"source": "Azure",
16+
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss2"
17+
},
18+
"displayName": "Install endpoint protection solution on virtual machine scale sets",
19+
"status": {
20+
"code": "NotApplicable",
21+
"cause": "OffByPolicy",
22+
"description": "The effective policy for the assessment was evaluated to off - use Microsoft.Authorization/policyAssignments to turn this assessment on",
23+
"statusChangeDate": "2021-04-12T09:07:18.6759138Z",
24+
"firstEvaluationDate": "2021-04-12T09:07:18.6759138Z"
25+
},
26+
"additionalData": {
27+
"linkedWorkspaceId": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myLaWorkspace"
28+
}
29+
}
30+
}
31+
}
32+
}
33+
}

‎specification/security/resource-manager/Microsoft.Security/stable/2021-06-01/examples/Assessments/ListAssessments_example.json

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
{
2+
"parameters": {
3+
"api-version": "2021-06-01",
4+
"scope": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23"
5+
},
6+
"responses": {
7+
"200": {
8+
"body": {
9+
"value": [
10+
{
11+
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss1/providers/Microsoft.Security/assessments/21300918-b2e3-0346-785f-c77ff57d243b",
12+
"name": "21300918-b2e3-0346-785f-c77ff57d243b",
13+
"type": "Microsoft.Security/assessments",
14+
"properties": {
15+
"resourceDetails": {
16+
"source": "Azure",
17+
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss1"
18+
},
19+
"displayName": "Install endpoint protection solution on virtual machine scale sets",
20+
"status": {
21+
"code": "Healthy",
22+
"statusChangeDate": "2021-04-12T09:07:18.6759138Z",
23+
"firstEvaluationDate": "2021-04-12T09:07:18.6759138Z"
24+
}
25+
}
26+
},
27+
{
28+
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss2/providers/Microsoft.Security/assessments/21300918-b2e3-0346-785f-c77ff57d243b",
29+
"name": "21300918-b2e3-0346-785f-c77ff57d243b",
30+
"type": "Microsoft.Security/assessments",
31+
"properties": {
32+
"resourceDetails": {
33+
"source": "Azure",
34+
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss2"
35+
},
36+
"displayName": "Install endpoint protection solution on virtual machine scale sets",
37+
"status": {
38+
"code": "NotApplicable",
39+
"cause": "OffByPolicy",
40+
"description": "The effective policy for the assessment was evaluated to off - use Microsoft.Authorization/policyAssignments to turn this assessment on",
41+
"statusChangeDate": "2021-04-12T09:07:18.6759138Z",
42+
"firstEvaluationDate": "2021-04-12T09:07:18.6759138Z"
43+
},
44+
"additionalData": {
45+
"linkedWorkspaceId": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myLaWorkspace"
46+
}
47+
}
48+
}
49+
]
50+
}
51+
}
52+
}
53+
}

‎specification/security/resource-manager/Microsoft.Security/stable/2021-06-01/examples/Assessments/PutAssessment_example.json

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
{
2+
"parameters": {
3+
"api-version": "2021-06-01",
4+
"resourceId": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss2",
5+
"assessmentName": "8bb8be0a-6010-4789-812f-e4d661c4ed0e",
6+
"assessment": {
7+
"properties": {
8+
"resourceDetails": {
9+
"source": "Azure"
10+
},
11+
"status": {
12+
"code": "Healthy"
13+
}
14+
}
15+
}
16+
},
17+
"responses": {
18+
"200": {
19+
"body": {
20+
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss1/providers/Microsoft.Security/assessments/8bb8be0a-6010-4789-812f-e4d661c4ed0e",
21+
"name": "8bb8be0a-6010-4789-812f-e4d661c4ed0e",
22+
"type": "Microsoft.Security/assessments",
23+
"properties": {
24+
"resourceDetails": {
25+
"source": "Azure",
26+
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss1/providers/Microsoft.Security/assessments/8bb8be0a-6010-4789-812f-e4d661c4ed0e"
27+
},
28+
"displayName": "Install internal agent on VM",
29+
"status": {
30+
"code": "Healthy"
31+
}
32+
}
33+
}
34+
},
35+
"201": {
36+
"body": {
37+
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss1/providers/Microsoft.Security/assessments/8bb8be0a-6010-4789-812f-e4d661c4ed0e",
38+
"name": "8bb8be0a-6010-4789-812f-e4d661c4ed0e",
39+
"type": "Microsoft.Security/assessments",
40+
"properties": {
41+
"resourceDetails": {
42+
"source": "Azure",
43+
"id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/myRg/providers/Microsoft.Compute/virtualMachineScaleSets/vmss1/providers/Microsoft.Security/assessments/8bb8be0a-6010-4789-812f-e4d661c4ed0e"
44+
},
45+
"displayName": "Install internal agent on VM",
46+
"status": {
47+
"code": "Healthy"
48+
}
49+
}
50+
}
51+
}
52+
}
53+
}

‎specification/security/resource-manager/Microsoft.Security/stable/2021-06-01/examples/AssessmentsMetadata/CreateAssessmentsMetadata_subscription_example.json

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"parameters": {
3+
"api-version": "2021-06-01",
4+
"subscriptionId": "0980887d-03d6-408c-9566-532f3456804e",
5+
"assessmentMetadataName": "ca039e75-a276-4175-aebc-bcd41e4b14b7",
6+
"assessmentMetadata": {
7+
"properties": {
8+
"displayName": "Install endpoint protection solution on virtual machine scale sets",
9+
"description": "Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities.",
10+
"remediationDescription": "To install an endpoint protection solution: 1. <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>",
11+
"categories": [
12+
"Compute"
13+
],
14+
"severity": "Medium",
15+
"userImpact": "Low",
16+
"implementationEffort": "Low",
17+
"threats": [
18+
"dataExfiltration",
19+
"dataSpillage",
20+
"maliciousInsider"
21+
],
22+
"assessmentType": "CustomerManaged"
23+
}
24+
}
25+
},
26+
"responses": {
27+
"200": {
28+
"body": {
29+
"id": "/providers/Microsoft.Security/assessmentMetadata/ca039e75-a276-4175-aebc-bcd41e4b14b7",
30+
"name": "ca039e75-a276-4175-aebc-bcd41e4b14b7",
31+
"type": "Microsoft.Security/assessmentMetadata",
32+
"properties": {
33+
"displayName": "My organization security assessment",
34+
"description": "Assessment that my organization created to view our security assessment in Azure Security Center",
35+
"remediationDescription": "Fix it with these remediation instructions",
36+
"categories": [
37+
"Compute"
38+
],
39+
"severity": "Medium",
40+
"userImpact": "Low",
41+
"implementationEffort": "Low",
42+
"threats": [
43+
"dataExfiltration",
44+
"dataSpillage",
45+
"maliciousInsider"
46+
],
47+
"assessmentType": "CustomerManaged"
48+
}
49+
}
50+
}
51+
}
52+
}

‎specification/security/resource-manager/Microsoft.Security/stable/2021-06-01/examples/AssessmentsMetadata/DeleteAssessmentsMetadata_subscription_example.json

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
{
2+
"parameters": {
3+
"api-version": "2021-06-01",
4+
"subscriptionId": "0980887d-03d6-408c-9566-532f3456804e",
5+
"assessmentMetadataName": "ca039e75-a276-4175-aebc-bcd41e4b14b7"
6+
},
7+
"responses": {
8+
"200": {}
9+
}
10+
}

‎specification/security/resource-manager/Microsoft.Security/stable/2021-06-01/examples/AssessmentsMetadata/GetAssessmentsMetadata_example.json

Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
{
2+
"parameters": {
3+
"api-version": "2021-06-01",
4+
"assessmentMetadataName": "21300918-b2e3-0346-785f-c77ff57d243b"
5+
},
6+
"responses": {
7+
"200": {
8+
"body": {
9+
"id": "/providers/Microsoft.Security/assessmentMetadata/21300918-b2e3-0346-785f-c77ff57d243b",
10+
"name": "21300918-b2e3-0346-785f-c77ff57d243b",
11+
"type": "Microsoft.Security/assessmentMetadata",
12+
"properties": {
13+
"displayName": "Install endpoint protection solution on virtual machine scale sets",
14+
"policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de",
15+
"description": "Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities.",
16+
"remediationDescription": "To install an endpoint protection solution: 1. <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>",
17+
"categories": [
18+
"Compute"
19+
],
20+
"severity": "Medium",
21+
"userImpact": "Low",
22+
"implementationEffort": "Low",
23+
"threats": [
24+
"dataExfiltration",
25+
"dataSpillage",
26+
"maliciousInsider"
27+
],
28+
"publishDates": {
29+
"GA": "06/01/2021",
30+
"public": "06/01/2021"
31+
},
32+
"plannedDeprecationDate": "03/2022",
33+
"tactics": [
34+
"credentialAccess",
35+
"persistence",
36+
"execution",
37+
"defenseEvasion",
38+
"collection",
39+
"discovery",
40+
"privilegeEscalation"
41+
],
42+
"assessmentType": "BuiltIn"
43+
}
44+
}
45+
}
46+
}
47+
}

0 commit comments

Comments
 (0)